Fraud and cybercrime statistics: US vs Brazil vs the world

Charts and tables on fraud losses (FBI IC3, FTC, Febraban, Pix), cost of data breaches, ransomware, phishing, attacks per region and market size, every series sourced.

US — losses reported to the FBI IC3 — US$ billions per year

	Losses
2020	US$ 4.2 bi
2021	US$ 6.9 bi
2022	US$ 10.3 bi
2023	US$ 12.5 bi
2024	US$ 16.6 bi
2025	US$ 20.877 bi

Source: FBI IC3 Internet Crime Report 2025 ↗

US — losses by scam type (IC3) — US$ billions

	Investment	BEC	Tech support	Romance / confidence	Government impersonation
2023	US$ 4.57 bi	US$ 2.95 bi	US$ 0.9245 bi	US$ 0.6525 bi	US$ 0.3941 bi
2024	US$ 6.57 bi	US$ 2.77 bi	US$ 1.46 bi	US$ 0.672 bi	US$ 0.4056 bi
2025	US$ 8.65 bi	US$ 3.05 bi	US$ 2.13 bi	US$ 0.9293 bi	US$ 0.7979 bi

Source: FBI IC3 Internet Crime Report 2025 ↗

US — losses of victims aged 60+ (IC3) — US$ billions

	Losses
2024	US$ 4.885 bi
2025	US$ 7.748 bi

Source: FBI IC3 Internet Crime Report 2025 ↗

US — fraud reports to the FTC — millions of reports per year

	Reports
2020	2.467103 mi
2021	3.041971 mi
2022	2.572424 mi
2023	2.621649 mi
2024	2.600678 mi
2025	3 mi

Source: FTC Consumer Sentinel ↗

US — fraud losses reported to the FTC — US$ billions

	Losses
2024	US$ 12.537 bi
2025	US$ 15.9 bi

Source: FTC Consumer Sentinel / depoimento ao JEC ↗

Brazil — banks' fraud losses (Febraban) — R$ billions, electronic channels and cards

	Losses
2023	R$ 8.6 bi
2024	R$ 10.1 bi

Source: Febraban (via Jornal de Brasília) ↗

Brazil — Pix MED disputes — millions per month, 2025

	Disputes
Média jan–ago	1.3 mi
Out/25	3.5 mi
Nov/25	3.4 mi

Source: Banco Central (via Economic News Brasil) ↗

Brazil — fraud attempts (Serasa) — millions, 2025 year to date

	Attempts
Jan	1.242093 mi
1º sem	6.937832 mi
Jan–set	10.886982 mi

Source: Serasa Experian, Indicador de Tentativas de Fraude ↗

Europe — payment fraud in the EEA — € billions

	Fraud
2022	€ 3.4 bi
2023	€ 3.5 bi
2024	€ 4.2 bi

Source: EBA-ECB 2025 Report on Payment Fraud (via Banque de France) ↗

FBI IC3 complaints from victims outside the US — 2025, top 12 countries

	Complaints
Canadá	7479
Índia	5879
Japão	5764
Reino Unido	4106
Alemanha	3056
Filipinas	2725
Brasil	2686
França	2326
Colômbia	2222
Austrália	2069
México	1654
África do Sul	1532

Source: FBI IC3 Internet Crime Report 2025 ↗

Average cost of a data breach (IBM 2025) — US$ millions per incident

	Cost
EUA	US$ 10.22 mi
Saúde (global)	US$ 7.42 mi
Serv. financeiros (global)	US$ 5.56 mi
Média global	US$ 4.44 mi

Source: IBM / Ponemon, Cost of a Data Breach 2025 (via CyberScoop) ↗

Global average cost of a breach (IBM) — US$ millions

	Cost
2022	US$ 4.35 mi
2023	US$ 4.45 mi
2024	US$ 4.88 mi
2025	US$ 4.44 mi

Source: IBM CODB (2022–24 via DeepStrike; 2025 via CyberScoop) ↗

Days to identify and contain a breach (IBM) — days

	Lifecycle
2023	277 dias
2024	258 dias
2025	241 dias

Source: IBM CODB 2025 (via CyberScoop) ↗

US — data compromises (ITRC) — cases per year

	Compromises
2019	1278
2020	1107
2021	1859
2022	1798
2023	3202
2024	3152
2025	3322

Source: ITRC 2025 Annual Data Breach Report ↗

US — breach victim notices (ITRC) — millions

	Notices
2020	302.9 mi
2021	351.8 mi
2022	425.2 mi
2023	420.4 mi
2024	1367.1 mi
2025	278.8 mi

Source: ITRC 2025 Annual Data Breach Report ↗

US — healthcare breaches (HHS, ≥500 people) — breaches per year

	Breaches
2020	663
2021	715
2022	718
2023	745
2024	741
2025	805

Source: HHS OCR (via HIPAA Journal) ↗

Ransomware victims per quarter (Check Point) — victims posted on leak sites

	Victims
3T24	1270
1T25	2289
2T25	1600
3T25	1592

Source: Check Point Research ↗

Ransomware victims per month in 2026 — global, leak sites

	Victims
jan	702
fev	784
mar	844
abr	870
mai	791
jun	708

Source: Ransomware.live (via TI Inside) ↗

Ransomware: countries with most victims (Jun 2026) — victims in the month

	Victims
EUA	199
Alemanha	49
Brasil	23
Reino Unido	21
Índia	20
Canadá	20
França	15
Itália	15
México	14
Tailândia	13

Source: Ransomware.live (via TI Inside) ↗

Brazil — ransomware victims per year — sum by sector (estimate)

	Victims
2023	74
2024	133
2025	150
2026*	188

Source: Ransomware.live (cálculo Cyber Target) ↗

LatAm — blocked ransomware attempts (Kaspersky) — thousands, Aug 2024–Jun 2025

	Attempts
Brasil	549 mil
México	237 mil
Chile	43 mil
Equador	37 mil

Source: Kaspersky, Panorama de Ameaças 2025 (via Hardware.com.br) ↗

Phishing attacks per quarter (APWG) — unique phishing sites, thousands

	Attacks
2T24	877.536 mil
3T24	932.923 mil
4T24	989.123 mil
1T25	1003.924 mil
2T25	1130.393 mil
3T25	892.494 mil
4T25	853.244 mil

Source: APWG Phishing Activity Trends ↗

Global deepfake fraud losses — US$ millions

	Losses
2020–23	US$ 83 mi
2024	US$ 335 mi
2025	US$ 2500 mi
1º sem/26	US$ 764 mi

Source: Surfshark Research ↗

Weekly attacks per organization, by region (Check Point) — weekly average

	Africa	APAC	Latin America	Europe	North America	Global
1T25	3286	2934	2640	1612	1357	1925
2T25	3365	2874	2803	1669	1430	1984

Source: Check Point Research ↗

Latin America — weekly attacks per organization — weekly average (Check Point)

	Attacks
1T25	2640
2T25	2803
dez/25	3065
mar/26	3100

Source: Check Point (via Intelligent CIO; Dark Reading) ↗

Global information security spending (Gartner) — US$ billions (2026 and 2030: forecast)

	Spending
2025	US$ 217.7 bi
2026	US$ 248.2 bi
2030	US$ 371.9 bi

Source: Gartner (via Software Strategies Blog) ↗

Brazil — cybersecurity investment (Brasscom) — R$ billions (2026–29: projection)

	Investment
2025	R$ 22.2 bi
2026	R$ 25.6 bi
2027	R$ 29.6 bi
2028	R$ 33.5 bi
2029	R$ 38.2 bi

Source: Brasscom, Relatório de Cibersegurança (via Teletime) ↗

Cybersecurity workforce gap (ISC2 2024) — thousands of positions

	Gap
Índia	1073.646 mil
EUA	504.307 mil
Brasil	214.536 mil
Japão	169.603 mil

Source: ISC2 Cybersecurity Workforce Study 2024 ↗

US — crypto-related losses (IC3) — US$ billions

	Losses
2024	US$ 9.32 bi
2025	US$ 11.366 bi

Source: FBI IC3 Internet Crime Report 2025 ↗

Top ransomware groups in 2025

Group	2025 victims	Note	Source
Qilin	946 (NTT) / 1.044 (GuidePoint)	18% das vítimas em dez/2025 (Check Point)	↗
Akira	717 (NTT)	7% em dez/2025 (Check Point)	↗
LockBit 5.0	—	12% em dez/2025 (Check Point)	↗
Cl0p, Play, INC Ransom, SafePay, Lynx, RansomHub, DragonForce, Babuk2	—	Demais do top 10 da NTT	↗

Source: NTT Data via Picus; GuidePoint GRIT 2026; Check Point

Breach cost by sector and factor (IBM 2025)

Item	Value	Source
Média global	US$ 4,44 mi	↗
EUA	US$ 10,22 mi	↗
Saúde (global)	US$ 7,42 mi; ciclo de 279 dias	↗
Serviços financeiros (global)	US$ 5,56 mi	↗
Brasil	R$ 7,19 mi	↗
Brasil sem IA/automação em segurança	R$ 8,78 mi	↗
Brasil com uso extensivo de IA/automação	R$ 6,48 mi	↗
Shadow AI (global, custo adicional)	+US$ 670 mil	↗
Uso extensivo de IA (economia global)	~US$ 1,9 mi a menos	↗

Source: IBM / Ponemon, Cost of a Data Breach 2025 (via fontes secundárias)

Fraud and scam losses by country

Country/region	Metric	Value	Year	Source
EUA	Perdas reportadas ao FBI IC3	US$ 20,877 bi	2025	↗
EUA	Perdas com fraude relatadas à FTC	US$ 15,9 bi	2025	↗
Brasil	Perdas dos bancos (Febraban)	R$ 10,1 bi	2024	↗
Brasil	Pix roubado acumulado (BCB)	≥ R$ 24,52 bi	jan/2022–abr/2026	↗
México	Valor reclamado (CONDUSEF)	MXN 10,714 bi	1º sem/2025	↗
EEE	Fraude em pagamentos (EBA-BCE)	€ 4,2 bi	2024	↗
Reino Unido	Perdas com fraude (UK Finance)	~£ 1,3 bi	2025	↗
Índia	Fraude cibernética (I4C)	₹ 22.845,7 crore	2024	↗
Índia	Fraudes bancárias (RBI)	₹ 36.014 crore	FY2024-25	↗
Austrália	Perdas com golpes (ACCC)	A$ 2,18 bi	2025	↗
Singapura	Perdas com golpes (SPF)	S$ 913,1 mi	2025	↗
Global (42 países)	Perdas com golpes (GASA)	~US$ 442 bi	2025	↗

Source: Vários (ver coluna Fonte)

FBI IC3 2025: losses by crime type

Type	Complaints	Losses	Source
Investimento	72.984	US$ 8,65 bi	↗
BEC	24.768	US$ 3,05 bi	↗
Suporte técnico	47.794	US$ 2,13 bi	↗
Violação de dados pessoais	67.456	US$ 1,315 bi	↗
Romântico / confiança	23.159	US$ 929,3 mi	↗
Impersonação de governo	32.424	US$ 797,9 mi	↗
Phishing / spoofing	191.561	US$ 215,8 mi	↗
Extorsão	89.129	US$ 122,5 mi	↗
Ransomware	3.611	> US$ 32 mi	↗
Com componente de IA	22.364	US$ 893,3 mi	↗

Source: FBI IC3 Internet Crime Report 2025

Brazil: most reported scams by bank customers (H1 2025)

Scam	Reports	Change	Source
Falsa venda	174 mil	+314%	↗
Falsa central / falso funcionário	139 mil	+195,7%	↗
Golpe do WhatsApp	73 mil	−9,9%	↗

Source: Febraban (via Diario de Pernambuco)

US: data compromises by sector (ITRC 2025)

Sector	Compromises	Source
Serviços financeiros	739	↗
Saúde	534	↗
Serviços profissionais	478	↗
Manufatura	299	↗
Educação	188	↗

Source: ITRC (via eDiscovery Today)

Sophos: ransomware global vs Brazil

Metric	Value	Source
Global 2025: resgate mediano pago	US$ 1 mi (2024: US$ 2 mi)	↗
Global 2025: custo médio de recuperação	US$ 1,53 mi (2024: US$ 2,73 mi)	↗
Global 2025: pagaram resgate	~50%	↗
Brasil 2026: pedido mediano de resgate	US$ 640 mil (2025: US$ 392,5 mil)	↗
Brasil 2026: custo médio de recuperação	US$ 1,05 mi (2025: US$ 1,19 mi)	↗
Brasil 2026: causa raiz e-mail malicioso	37%	↗

Source: Sophos, State of Ransomware 2025 / Brazil 2026

EN · PT · ES · FR · ZH · AR